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MARKED UP \^ERSION 
Renewing an Firmware of Computer System 

ABSTR.\CT OF THE INVENTION 

A system relat e s to th e up to dat e of firmware for a computer m e mory Gystom is 
disclosed> Firstly^ a comput e r m e mory will bo divided into as four portions using the 
fimotion of this method accOrding to this pres e nt inv e ntion. Also> th e se four portions arc 
e mploy e d as th e following functions. Th e first portion is Initial Program, the s e cond 
portion is Firmwar e (P 1), the third portion is a Backup Firmwar e (P2), tho fourth portion 
is PI Firmwar e Parameter, and finally the fifth portion is P2 firmware, rospootiv e ly. 

Method for Updating Firmware of Computer Device 

ABSTRACT OF THE INVENTION 

A method for updating firmware of computer device to write the newer firmware 
into the computer memory twice is disclosed. It includes dividinR a memory of said 
computer device into five portions, wherein a initial program is saved in the first portion, 
a old firmware is saved in the second portion, a old backup firmware is saved in the third 
portion, the checksum of said old firmware is saved in the fourth portion and the 
checksum of said old backup firmware is saved in the fifth portion; executing said initial 
program in the first portion: writing a new firmware into the second portion from an 
external device for replacing said old firmware in the second portion; writing the 
checksum of said new firmware into the fourth portion from said extemal device; writing 
said new firmware into the third portion from said extemal device for replacing said old 
backup firmware in the third portion; writing the checksum of said new firmware into the 
fifth portion from said extemal device; and executing said new firmware in the second 
portion for operating said computer device. 
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BACKGROUND OF THE INVENTION 



1. Field of the Invention 

A GyGtom relates to th e up to date of firmwar e for a comput e r system is disclos e d, 
mor e particularly, the purpooo firmwar e can bo saf e ly replac e d inst e ad of th e original 
firm war er 

The present invention generally relates to a method for updating firmware of 
computer device, and more particularly to a method for updating firmware of computer 
device to write the newer firmware into the computer memory twice. 

2. Description of the Prior Art 

The rec e nt technology for upgrading firmwar e , is employed by using th e 
combination application of comput e r software and firmware. Normally, the purpos e 
firmwar e data of the computer syst e m will be r e ad wher e by software operation and data 
transformation to the related system through transformation media. 

Thus, the flow chart of computer system op e ration according to the prior art is 
Ghoym as Figure 1. WTion the m e thod starts, the prior firmware 10 will be removed as 1 1. 
Then th e new firmware is set up into computer memor>^ as 12. Thus the original firmw afe 
can be removed from th e saved m e mory space of computer system using the abov e 
method. Cons e quentially the new firmware can be written into the memory spac e 
quickly. 

However, if the comput e r system is suddenly stopped operating without th e 
electrical pow e r support, the computer syst e m will b e possibly destroyed. Esp e cially, no 
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doubt, tho Guddon brealcdowTi to a comput e r syst e m at the tim e in tho original firmware 
b e ing upgrad e d, th e comput e r syst e m will b e totally smash e d by the abovo accid e nt. 

The current firmware upgrade technology is almost performed by the computer 
special software (initial program) along with the firmware. Said software will read the 
upgraded firmware data directly, and transmit it to the computer device via the variable 
interfaces. Such computer device will delete the original firmware in the computer 
memory first and v^ite the new firmware data into its memory so as to finish upgrading 
and updating the firmware. 

Figure 1 illustrates the above procedure. The original firmware has saved in the 
computer memory in the step 10 first. Then, in the step IL the original firmware will be 
deleted fi-om the computer memory, and finally the new firmware from external device 
will be installed to the computer memory in the step 12. However, many uncertain events 
during the step from 10 to 12, such as the power failure, will result in the damage to the 
computer device. 

The disadvantage of this technology is that if the power failure or other 
uncertain events happen upon upgrading and updating the firmware and it incur the 
failure in yyriting the upgraded firmware, the original firmware in the memory can be 
destroyed or deleted, and the upgraded firmware is not completely installed in the 
computer memory yet. Therefore, such computer device will not fixnction normally. 

In general, the firmware, as the hybrid of the computer software and the hardware, 
is the hardware device with the predetermined program. In other words, the software 
recorded in the hardware is the firmware. For example, BIOS, recorded in the ROM on 
the motherboard should be implemented in order to tum on the computer before. Such 
BIOS, which can be modified only by the special bum-in machine, is one kind of the 
firmware. In addition to the ROM, the firmware can be stored in PROM, EPROM, 
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EEPROM or other programmable ROM» The programs recorded in ROM are usually 
named the microprograms. In present, the content of many firmwares in EPROM can be 
modified by the software (initial program). For example, the microprogram in the flash 
BIOS of the motherboard or modem can be modified by the initial program. 

SUMMARY OF THE INVENTION 

In accordancG with th e pr e s e nt inv e ntion, a method is provid e d for protecting and 
upgrading the firmw^aro that substantially solv e s th e abov e m e ntioned system error and 
possibl e faults to comput e r system. It c e rtainly can bo employed to necessity of th e 
scanner as well. Theroforo, th e m e thod of this present inv e ntion will be d e scrib e d as th e 
below stat e ment. The computer m e mory for saving firmwar e firstly will b e divid e d as 
five portions. Th e five portions also can bo indicat e d as th e following. 

Th e first portion is d e fin e d as an initializ e d program. The function of first portion 
is for prot e cting rec e nt firmwar e situation and processing th e movem e nt of prior e dition 
firmware and then installing n e w e dition firmwar e into comput e r m e mory. It can bo 
guarant ee d that this initializ e d program n e v e r b e en not modifi e d wh e n mov e ment and 
installing is und e r operation. Then, tho second portion is a roal firmware for controlling 
comput e r systems, which provid e s a new e dition firmwar e loading. Th e third portion is a 
backup firmwar e of comput e r syst e m. This portion is always corr e ct and will b e 
execut e d. Ev e n though a n e w e dition firmware is failed to install into th e comput e r 
m e mory, the third portion still can r e pair th e effort of third portion of firmware. Finally, 
the fourth portion and the fifth portion can save th e param e ter of the s e cond and the third 
portion of firmwar e , such as th e volume of comput e r fil e s and the valu e of ch e oksimi. 
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W'lien the firmwaro is und e r upgraded procoso, the second portion of firmwar e e aft 
bo GuccosGfuUy updated if thore is no e rror happonod. Th e initialized program will backup 
th e s e cond portion into th e third portion of firmwar e . Wh e n tho orrorG happen under 
upgrad e d proc e GS, tho initializod program will write bacli the backup fil e of tho third 
portion to tho o e cond portion. Therefore, th e computer syotem und e r op e ration Gtill can 
recover tho original firmware of original oypt e m, oven though the errors happen und e r 
upgraded proceoG. It can guarant e e th e oyot e m Ig under a normal condition. Aloo, it can 
Got up the firmware under the safety condition. Of couroe, tho param e ter of all new five 
portions v>ill.be ouccooofully renewed. 

In the light of the state of the art described above, it is an object of the present 
invention to provide a method for updating firmware of computer device which is 
immune to the problems of the conventional method for updating firmwar e of computer 
device. A newer firmware fi-om external device must be wr itten into the computer 
memory twice for avoiding the problem that the computer device can be not operated 
normallv because the original firmware of the computer device ha s been deleted already 
but the newer firmware is not installed successfiiUv into the com puter memory yet. 

In view of the above and other objects which vnll become appare nt as the 
description proceeds, there is provided according to a gen eral aspect of the present 
invention a method for updating firmware of computer device comp rises dividing a 
memory of said computer device into five portions, wherein a initial pro gram is saved in 
the first portion, a old firmware is saved in the second portion, a old ba ckup firmware is 
saved in the third portion, the checksum of said old firmware is sav ed in the fourth 
portion and the checksum of said old backup firmware is saved in the fifth portion; 
executing said initial program in the first portion; writing a new firmwar e into the second 
portion from an external device for replacing said old firmware in the second portion; 
writing the checksum of said new fumware into the fourth portion from said extemal 
device; writing said new firmware into the third portion firom said ex temal device for 
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replacing said old backup firmware in the third portion; writing the checksum of said new 
firmware into the fifth portion from said external device; and executing said new 
firmware in the second portion for operating said computer device. 

Based on the idea described above, wherein said computer device includes a 
scanner. 

Based on the aforementioned idea, wherein the step of executing said initial 
program further comprises verifying the correctness of said old firmware program in the 
second potion by checking the checksum of said old firmware in the fourth potion: 
verifying the correctness of said old backup firmware program in the third potion by 
checking the checksum of said old Firmware in the fifth potion; and verifying the identity 
of said old firmware program and said old backup firmware program. 

Based on the idea described above, wherein the step of verifying the correctness 
of said old firmware program further comprises writing said old backup firmware 
program in the third portion into the second portion for renew said old firmware program 
when said old firmware program is defective; and writing the checksum of said old 
backup firmware program in the fifth portion into the fourth portion for renew the 
checksum of said old firmware program. 

Based on the aforementioned idea, wherein the step of verifying the correctness of 
said old backup firmware program fiirther comprises writing said old firmware program 
in the second portion into the third portion for renew said old backup firmware program 
when said old backup firmware program is defective: and writing the checksum of said 
old firmware program in the fourth portion into the fifth portion for renew the checksum 
of said old backup firmware program. 

Based on the idea described above, wherein the step of verifying the identity of 
said old firmware program and said old backup firmware program fiirther comprises 
writing said old backup firmware program in the third portion into the second portion for 
renew said old firmware program when said old backup firmware program is different 
from said old firmware program; and writing the checksum of said old backup firmware 
program in the fifth portion into the fourth portion for renew the checksum of said old 
firmware program. 



6 



BRIEF DESCRIPTION OF THE DRAWINGS 

Further details of th e pr e s e nt invention will b e apparent to th e thoso who Gkillod in 
the art by r e f e renc e to the e x e mplar)^ e mbodim e nt in the drawing in which: 

Figure 1 illustrat e s the flow chart of th e conv e ntional technique according to the 
prior art; 

Figur e 2 illustrates the flow chart of this method according to th e pr e sent 
inv e ntion; and 

Figur e 3 illustrates the relationship between the five conditions according to th e 
pr e s e nt inv e ntion. 

Tabl e 1 illustrat e s th e four portions of th e m e mory of comput e r syst e m according 
to this pr e s e nt embodim e nt. 

The foregoing aspects and many of the attendant advantages of this invention will 
become more readily appreciated as the same becomes better understood by reference to 
the following detailed description, when taken in conjunction with the accompanying 
drawings, wherein: 

Figure 1 illustrates the flowchart of conventional updating firmware; 

Figures 2A-2E illustrate the flowchart of preferred embodiment according to the 
present invention; and 

Figure 3 illustrates the four conditions by referring to Figures 2B-2E. 

DESCRIPTION OF THE PREFERRED EMBODIMENT 

Th e m e thod of th e pr e s e nt invention is appli e d to a broad rang e of firmwar e 
relat e d range and can bo from a vari e ty of related invention. Th e following d e scription 
discuss e s several prosontl)^ pr e ferr e d e mbodim e nts of th e method of th e present im^ontion 
as implem e nted in proc e ss, since the majority of currently available is fabricat e d in 
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foundry and the m'C-^* r^n».mr.nly »r.nniintnrnH npplicQtionn of tho prooont invontion will 
involve probl c nn fr^rr ""^ ""•"'"^ mathnH Movoitholooo. tho prooont invontion may 
aloo bo advaiitagoouoly omployod in any port of computor tool-inology. Accordingly, 

application of thr p- * ^"^rr^ntinn in not nnlv intondcd to bo limited to thooo dovicec 

fabricat e d in dlicon n,.p.;-nnri„ntnr mntnrinln. hut alno will includo thooo fabricated in one 
or moro of tho available. 

Thuo, tho following io a doooription of tho prooont invontion. 
Thu inv e ntion v . -i ll f ir -it l y W ^-^nnrihnH ivitl-. rnfrrnnnn tn ono OKomplar>^ ptructure. 
Somo voriationii will bo doccribod ao v , 'oll op advantagoc of tho prooont invention. A 
p r oforr o d motho d nf ^--^---^--n" thnn hn dincmood. It can bo that the diDoloauro of a 
digital computer having a momory containing a program which ic oxocutod by the 
computer. 

Tlio proforrod ombodimont of Uiio prooont invontion will be doocribod as the 
following. Ad Tablo 1, firatly, tho computor momor)' will be divided ao tho following five 
portiono. Tho firot portion oo Initial Progi-am io not modified but fiKod up. Aloo, this 
Initial Program will bo oxocutod whon computor oyotom otnrt '. 

Table It 



Initial Program 



Firmwaro (PI) 



Backup Firmware (P2) 



PI Firmwaro Parameter 



P2 Firmwaro Paramet e r 



S 



Tlion oh cc bum vn l nr ^"-"^ p^^rtinn nf th\r firmwaro io oalculatod and is 
comparod with the parameter of fourth portion for chocking if it io proper. Thon, the 
oocond portion io Firmware PI, tho third portion io Backup Firmwaro P2. Tho fourth 
portion " ill be PI Frnr"'^--^ T^nrnmntnr nnr.nrdinQ to Table 1 and tho fifth portion will bo 
P2 Firmwar e Paramotor according to Table 1. Figure 2 aloo ohovra tho inter relationship 
botwoon tho following four conditiono. 

I^Jormally, referring with Figure 2, tho first portion of thio computer firm^vare is 
defined a:: on Initin l P-^g--^"^ thnt thir . prnpram > ^ ill not bo modified but will bo fixod 
Abo, thic fir-t p - rt-- fi.-.nn.,.nrn nnii ho QKocutod wliilo tho systoni otarta. Then, the 
occond portion of Firmware (PI) is read and io oaloulated. Tliufl, checksum vn l ue of 
rirm-arc PI "il l "r- ^.u^.^'^nri Thn nhnvn chQcksvim value of Firmwaro PI can be 
comparod ^^ith tho parameter of tho fourth portion and can bo ohock if it io correct. MOien 
tho result io correct, the computer o^ otem can bo continued. 

GcquGntially, as Figuro 2, tho third portion of Firmwmo (P2) io road and is 
oalculatod. Thuo, checksum value of Firmn , rf i f e P2 vill be obtained. The above checksum 
value of Fimivare P? ^" r^nmpnraH with tho poramoter of tho fiftli portion and ran he 
check if it i= c orrc r t '"^-"'t mrrnct. tho computer systom can be continuod. 

Tliuc, th o third p o rt i o n i?^r-»n,,rnrr. vi nnn hn rhockod. Hero. Firmwaro PI v . i l1 
be error at the brt "p^^-^inn fnr rafrnrhin^ the firmv , 'aio of computci' oyotem if Firmware 
PI i:: incorr o ct. At t h ii t^"- \ T,.;tini ffrntrmm r . hmild ^^to back to Backup Firm>varo P2 to 
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Firmwar e PI of tho Gocond portion. Thon, tho original computer program can bo repaired 
so that the computer oyiitom can otill run the oorroot oporation. 

It ic dio-g-n .1= Fig vi r r ? , n ft f-r Hi^-'-j"!: T^irmTtr>irn Pi thn n.ickup Firmware P2 v . ill 
be ocquontially chockod. Firotly, Backup Firmvraro P2 can bo read and calculated its 
checksum -/aluc by Ir-^j--' Prnj^mrr. n-mn thn renult can be compared with tho parameter 
of tho fourth portion and fifth portion of firmware, 00 that tho next chocking can bP 
executed if D a? l :\i r t^-— '-'•'^ r.niTP.nt. TTnwcver. if Backup Firmwraro P2 \r 

ineoi TO Ct, it can br r n Ti--^ ^^-"^ ""-"^^ nf Backup Firmware V2 happened at the 

laot duplicating firmv . 'aro prooooo. Thoroforo, at tho camo time. Initial Program ohould 

^v r ite Firm- nrr PI -f F"^"" "y^^^"^ nackuD Firmv . aro P2 of computer syptem 

and chould rcrt n rt T"'"^ "Y"^""^ "f""'" ^° oitocuto Backup Firmware P? o f 

computer oyotom. It can kocp Backup Fimiware P2 saved ao a corrected firm^vare. 

.\ftai rinn nrc PI n nd Pfirknr TTit^^vnrn nrn mmrod all corroot. both of th e 
firmvraro ohould be compared if thoy are tlio oamo. Aftor Firm>varc PI io oucceoofully 
ronowod. Backup Firmwtirc P2 io not yet baoked up duo to accidento poooibly happen to 
tho oomputor oyotom, cuch aa ohort circuh. Therefore, if the reault io different after the 
oomporability bot>voon Firm>vaio PI and Backup P2, Firmwaro PI mil bo baclcup to 
Backup Firmware P2. If Finnwwo PI and Backup P2 aro tho oamo aftor the 
comparability, Initinl ^^^z^-^r, her .nmnvod to Firmwaro PI, which can procooc the 
normal operation for computer oyotom. Eopocially, thia invontion can bo omployod to 
noooooity of the ooann e r. 

With reference to Figure 2, tlio oocond portion ao Firmwraro PI, the function of 
tliic portion for the ^ -•^r"""" ^l""*""' '"^'^"^^ ^"'^ """trolling tho oomputor oyotom. The 
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now firmware data will firstly bo rowitton into thio portion at any tim e wh e n it is going 
to rofr e oh tho original firmware. 

Tho third portion, ao Backup Firmwaro (P2), thio portion io for bocoming ao the 
backup filo of tho prooont firmwaro. Also, tho main funotion of this portion is for 
roconotructing tho data of Firmvraro PI if Firm>varo PI io >wong, as Figure 2. 

Tho fourth portion, ao PI Firmwaro Paramotor, thio portion io for oa^nng Firmware 
PI and Backup Firmwnr? P? t^'^''' ^hnr-lrnnin vnlnn Tho namo with ho fifth portion, as 
P2 Firmware Parameter, thi^ pmtinn ir fnr nnving Firmwaro PI and Backup Firmware P2 
and their ch o cknum vti l it" ^ pnrfmnr will hn prnvidod for chocking Firmwaro PI 
and ohoolcing Backup Firmwaro P2 under Initial Program operation, ao Figuro 2. 

After tho abovo dofinition, aomo of poooiblo conditions happen in the 
proferrod ombodiment. Thus, tho flow ohart of thio proforrod ombodimont mil be 
procoDood under tho follo>^ang conditions and ohown by Figur e 3. 

Figure 3 chor - Conr li t i "" ^ ^^rV^inh ia 1^nf^»r n nnrmni ovocution > , ^ithout >vriting 
now firmwaro into tho comput e r momor)^ and otarting from legend 20 of Figure 3 : 

(1) Chocldng Firmware PI, ao legend 21 of Figuro 3, it wU bo proper due to without 
writing operation; 

(2) Chooldng Backup Firmwaro P2, ao legend 22 of Figure 3, it will bo proper due to 
without writing operation; 

(3) Chocking if Firmvrnr" •'"^ T7nnlr,.p Firmwnrn P2 in tho same, ao legend 23 of 
Figur e 3, it will b e tho oam e duo to \^ i dthout >^Titing operation; and 
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(1) Back up to Firmwar e PI and Firmwar e PI will b e ex e cut e d if th e r e is no e rror 
happen e d, ao l e g e nd 21 of Figur e 3. 

Condition 2 is also indicat e s as Figure 3, Firmwar e PI is wTitt e n into the 
comput e r memory but tho wTitton operation is fail e d, so that th e proc e ss is start e d from 
legend 20 of Figure 3 : 

(1) Chocking if Firmwar e PI is correct, as l e g e nd 21 of Figure 3, it could b e wrong du e to 
VNTitten operation is fail e d; 

(2) Backup Firmware P2 is wTitton into Firmw^are PI, as l e gend 25 of Figure 3. If it fails, 
it also can restart and go back to condition 3, as Figur e 2, otherwis e to bo continu e d; and 

(3) There is no e rror happened. Initial Program can bo ro oxocutod and it can go to 
Condition 1, as Figur e 2. 

Figur e 3 illustrates Condition 3 as w e ll. A chang e abl e firmw^ar e , when Backup 
Firmware P2 is successfully wTitten into the comput e r m e mor>r but backup operation is 
failed so that th e process is start e d from legend 20 of Figur e 3 : 

(1) Ch e cking if Firmw^aro PI is corr e ct, as logond 21 of Figur e 3, it could b e right due to 
succ e ssfully WTiting; 

(2) Ch e cking if Backup Firmw^ar e P2 is corr e ct, as legend 22 of Figure 3 it could b e 
wrong du e to backup operation is failed, it n ee ds a backup op e ration; 

(3) Firmwaro PI will be witton into Backup Firmw^ar e P2, as leg e nd 26 of Figure 3. If it 
fails, it also can restart and go back to condition 1, as Figure 2, otherwise to bo continued; 
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(^)Th e r e is no e rror happoned, Initial Program will b e r e e x e cut e d and back to condition 
1, ao Figure 2. 

Again, r e f e rring with Figur e 3, Condition 1 for checking th e purpose firm\v ^=e-4e 
oucc e DofuUy \witten into the comput e r momory so that th e proc e ss is otart e d from legend 

20 of Figure 3: 

(1) Ch e cking if Firmware PI corroct, as l e gend 21 of Figure 3, it is right duo to a 
successful writing operation; 

(2) Chocking if Backup Firmware P2, as l e gend 22 of Figure 3, it is right without writing 
op e ration; 

(3) Checking if Firmw^ar e PI and Backup Firmware P2 ar e the same, as l e g e nd 23 of 
Figure 3. Firmware PI and Backup Firmware P are differ e nt du e to Firmwar e PI is a 
changeable firmware but the Backup Firmw^ar e P2 is an original firmw^are, th e refor e 
Backup Firmware P2 will be backup; 

(1) Firmw^are PI is backup into Backup firmware P2, as leg e nd 26 of Figure 3. It will go 
back to condition 1 if the backup op e ration is failed, as Figur e 2. Th e n it can be continu e d 
if backup is successful; and 

(5) Th e re is no e rror happened, then Initial Program can b e re e xecuted and back to 
condition 1, as Figure 2, 

According to this pref e rred e mbodiment, this inv e ntion can p e rform m e thod st e ps 
for operating a firmw^are that concludes th e steps of th e following. Also, this invention 
can b e used to the scanner. 
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Firstly a momory of th e machin e is divid e d as fiv e portions which are able to 
provid e space for storing a plurality of comput e r readable program. S e quentially an initial 
program can be install e d into a first portion of the m e mory of th e machin e and as a 
comput e r r e adable fixed program. Thon r e moving a first firmwar e from th e m e mory of 
tho machine would b e carried out. A s e cond firmwar e is install e d into a second portion of 
memor>^ of th e machine. A second firmwar e is back e d up into a third portion of th e 
momor>^ of th e machine. i\nd finally, a plurality of param e ter of th e s e cond firmv » me is 
installed into fourth portion of memory of the machine. 

Finally, it is mention e d in the preferred embodiment, checking checksum of the 
firmwar e is the method for ensuring if the firmwar e is correct. Also, check ch e cksum 
betwe e n any two of firmware will b e tho method for ensuring if both of the firmwar e s afe 
the sam e . Th e r e fore, in accordance with the present inv e ntion, a method is provid e d for 
prot e cting and upgrading firmware that substantially solv e s the above mention e d syst e m 
error and possible faults to computer system. In addition, tho computer system und e r 
operation still can recover th e original firmware of original syst e m, ev e n though the 
e rrors happen under upgraded process. It can guarantee the system is under a norm al- 
condition. Also, it can s e t up th e firmwar e under the safety condition. Of cours e , th e 
param e ter of all new^ five portions will b e succ e ssfully ren e w e d. 

It is und e rstood that various other modifications will be appar e nt to and can be 
readily made by those skill e d in the art without departing fi-om th e scop e and spirit of this 
inv e ntion. Accordingly, it is not int e nded that the scop e of th e claims append e d her e to b e 
limited to the description as s e t forth herein, but rath e r that tho claims be constru e d as 
encompassing all tho features of pat e ntabl e nov e lty that resid e in th e pres e nt inv e ntion. 
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including all f e atures that would bo treat e d as e quivalonto thoroof by thos e skilled in tho 
art to which this invention pertains. 

Some sample embodiments of the present invention will now be described in 
greater detail. Nevertheless, it should be recognized that the present invention can be 
practiced in a wide range of other embodiments besides those explicitly described, and 
the scope of the present invention is expressly not limited except as specified in the 
accompanying claims. 

First, in the preferred embodiment to this invention, the computer memory 
should be divided into five portions as illustrated in Table 1 . The Initial Program is saved 
to the first portion. The firmware program (PI) is saved to the second portion. The 
backup firmware program (P2) is saved to the third portion. The parameter of the PI is 
saved to the fourth portion. The parameter of the P2 is saved to the fifth portion. This 
invention can also be applied to the scanner. 

Table 1 

First portion: initial program 

Second portion: firmware program (PI) 

Third portion: backup firmware program (P2) 

Fourth portion: the parameter (checksum) of the PI 

Fifth portion: the parameter (checksum) of the P2 



As illustrated in Table L the initial program in the first portion is readable only. 
When the computer device starts, the initial program should be implemented first. Then, 
the firmware program (PI) in the second portion is read and the checksum of PI is 
checked up. Such checksum will be verified in comparison with the parameter of the PI 
in the fourth portion. If the verification passes, the firmware program (PI) is correct, and 
the whole procedure may continue. 

If the firmware program (PI) is not correct upon the verification of the 
checksum of PI £md the parameter of the PI in the fourth portion, the firmware program 
(PI) should be defective after the previous update. Then the initial program should read 
the backup firmware program (P2) in the third portion and write it into the second portion 

15 



in order to repair the original firmware program (PI) and the computer device can operate 
normally. 

The verification of the backup firmware program (P2) in the third portion 
should continue after the successful verification on the firmware program (PI) in the 
second portion. The initial program will check up the checksum of the P2, and such 
checksum will be verified in comparison with the parameter of the P2 in the fifth portion. 
If the verification passes, the backup firmware program (P2) is correct and the next step 
may be proceeded. If the verification fails, the backup firmware program (P2) should be 
defective. Then the initial program will read the Firmware program (PI) in the second 
portion and write it into the third portion. Thus, the backup firmware program (P2) will 
be correct again. 

The firmware program (PI) should be compared with the backup firmware 
program (P2) after the successful verification on the firmware program (PI) and the 
backup firmware program (P2). The reason is that the update step of the backup firmware 
(P2) may not be run due to the power failure after the successfiil update on the firmware 
program (PI). Therefore, if the firmware program (PI) is not the same with the backup 
firmware program (P2). the firmware program (PI) in the second portion should be 
duplicated to the third portion as the backup firmware program (P2). After the result 
regarding the comparison between the firmware program (PI) and the backup firmware 
program (P2) is identicah the implementation of the initial program will cease. And the 
firmware program (PI) should be implemented in order to operate the computer device. 
This invention can be applied to the scanner, too. 

As illustrated in Table I, the firmware program (PI) in the second portion is the 
main firmware to control the computer device. The newer firmware should be v^itten 
into this portion upon updating the old firmware in the future. 

As illustrated in Table 1, the backup firmware program (P2) in the third portion 
is the backup program of the main firmware to control the computer device. If the 
firmware program (PI) in the second portion is defective, then the backup firmware 
program (P2) in the third portion can be used to repair the defective firmware program 
(PI) and the computer device can operate normally again. 
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For the initial program verifies the correctness of the firmware program (PI) 
and the backup firmware program (P2), the parameters of the PK P2 firmwares in the 
fourth and fifth portions, as illustrated in Table h are the checksums for the verification 
on the firmware program (PI) and the backup firmware program (P2). 

Next, Figures 2A-2E and Figure 3 illustrate the flow chart of the preferred 
embodiment to this invention and also demonstrate the four conditions by referring to 
FIGs. 2B-2E as follows. 

Please see the Figure 3. At the first condition, it is the normal condition that no 
firmware will be updated. The workflow of the initial program is as follows. (1) as shown 
in the step 21 in Figure 2B. this is to verify the correctness of the firmware program (PI) 
in the second potion by checking the checksum of such firmware in the fourth potion. If 
such firmware is not defective, it should be correct. (2) as shown in the step 22 in Figure 
2B, it is to verify the correctness of the backup firmware program (P2) in the third potion 
by checking the checksum of such firmware in the fifth portion. If such firmware is not 
defective, it should be correct. (3) as shovro in the step 23 in Figure 2B, this is to verify 
the identity of the firmware program (PI) with the backup firmware program (P2). (4) as 
shovyn in the step 24 in Figure 2B, there is no error under the above procedure, and the 
implementation of the firmware program (PI) in the second portion will be run to control 
the computer device. 

Please revisit the Figure 3. The second condition is that the newer firmware 
should be written into the second portion of the computer memory but such operation 
fails. The workflow of the initial program is as follows, (1) as shown in the step 21 in 
Figure 2C, this is to verify the correctness of the firmware program (PI) in the second 
portion by checking the checksum of such firmware in the fourth portion. Due to the 
failure of the write operation, such firmware should be defective. (2) as shown in the step 
25 in Figure 2C, the backup firmware program (P2) in the third portion v^ll be restored 
into the firmware program (PI) in the second portion. If the write operation fails, the 
computer device should be rebooted, and the second condition may proceed. Otherwise, 
the next procedure as illustrated in Figure 2C may proceed. (3) as shown in the step 27 in 
Figure 2C, the parameter of the P2 in the fifth portion will be restored into the parameter 
of the PI in the fourth portion. (4) as shovm in Figure 2C, there is no error under the 
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above procedure, and the initial program will be implemented again in order to fulfill the 
first condition. 

Please see Figure 3. The third condition is that the newer firmware is 
successfiillv written into the second portion of the computer memory but it fails to write 
into the backup firmware program of the third portion. The workflow of the initial 
program is as follows. (1) as shown in the step 21 in Figure 2D, this is to verify the 
correctness the firmware program (PI) in the second portion by checking the checksum 
of the such firmware in the fourth portion. Since the write operation finished 
successfully, such firmware should be correct. (2) as shown in the step 22 in Figure 2D, 
this is to verify the correctness of the backup firmware program (P2) in the third portion 
by checking the checksum of such firmware in the fifth portion. Due to the failure of the 
write operation, such firmware should be defective. (3) as shown in the step 26 in Figure 
2D, the firmware program (PI) in the second portion will be restored into the backup 
firmware program (P2) in the third portion. If the write operation fails, the computer 
device should be rebooted, and the third condition may proceed. Otherwise, the next 
procedure as illustrated in Figure 2D may proceed. (4) as shown in the step 28 in Figure 
2D, the parameter of the PI in the fourth portion will be restored into the parameter of the 
P2 in the fifth portion. (5) as shown in Figure 2D, there is no error under the above 
procedure, and the initial program will be implemented again in order to fiilfill the first 
condition. 

Please see Figure 3. The fourth condition is that the newer firmware is 
successfiiUy written into the second portion of the computer memory but it does not begin 
to write into the backup firmware program of the third portion due to the power failure or 
other reasons after the successfiil update on the firmware program (PI). The workflow of 
the initial program is as follows, (1) as shown in the step 21 in Figure 2E, this is to verify 
the correctness the firmware program (PI) in the second portion by checking the 
checksum of the such firmware in the fourth portion. Since the write operation finished 
successfully, such firmware should be correct. (2) as shown in the step 22 in Figure 2E, 
this is to verify the correctness of the backup firmware program (P2) in the third portion 
by checking the checksum of such firmware in the fifth portion. Due to the power failure, 
such firmware should be correct. (3) as shown in the step 23 in Figure 2E, this is to verify 
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the identity of the firmware program (PI) in the second portion with the backup firmware 
program (P2) in the third portion. The general method for verifying the identity of said 
two firmwares is to check the checksnms of said two firmwares. Since the firmware 
program (PI) in the second portion is the newer firmware, and the backup firmware 
program (P2) in the third portion is the old firmware, the checksums of said two 
firmwares in the fourth and fifth portions are different. (4) £is shown in the step 26 in 
Figure 2E, the firmware program (PI) in the second portion will be restored into the 
backup firmware program (P2) in the third portion. If the write operation fails, the 
computer device should be rebooted, and the fourth condition may proceed. Otherwise, 
the next procedure as illustrated in Figure 2E may proceed. (4) as shown in the step 28 in 
Figure 2E, the parameter of the PI in the fourth portion will be restored into the 
parameter of the P2 in the fifth portion. (5) as shown in Figure 2E. there is no error under 
the above procedure, and the initial program will be implemented again in order to fulfill 
the first condition. 

Although specific embodiments have been illustrated and described, it will be 
obvious to those skilled in the art that various modifications may be made without 
departing from what is intended to be limited solely by the appended claims. 
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